Identity Theft Recovery: A Step-by-Step Action Plan

First 24 Hours: Critical Actions

The first day is crucial for limiting damage. Quick action can prevent further fraud and start the recovery process. Don't wait – act immediately upon discovering identity theft.

Place Credit Freezes with All Bureaus; Add a Fraud Alert

Stop new accounts from being opened in your name immediately. A credit freeze prevents anyone from accessing your credit report to open new accounts.

What You'll Need for Credit Freezes:

• Personal information: Full name, address, date of birth, Social Security/Social Insurance Number
• Payment method: May require small fee (often waived for identity theft victims)
• PIN creation: You'll receive a PIN to lift the freeze when needed

Call Banks/Card Issuers; Close or Reissue Affected Accounts

Contact every financial institution immediately. Call the fraud departments directly – don't use contact information from suspicious communications.

Change Passwords + Enable MFA Everywhere—Email First

Start with your primary email account. If thieves control your email, they can reset passwords for other accounts and intercept recovery communications.

Password Change Priority Order:

1. Primary email account (Gmail, Outlook, etc.)
2. Banking and financial accounts
3. Work-related accounts
4. Social media accounts
5. Shopping and subscription accounts
6. All other online accounts

Secure Your Devices (OS Updates, Anti-Malware Scan)

Ensure your devices aren't compromised. Identity theft sometimes starts with malware or compromised devices.

Device Security Checklist:

• Update operating systems on all devices
• Run full anti-malware scans
• Check for suspicious software or browser extensions
• Secure your home WiFi with WPA3 encryption
• Log out of all devices from your online accounts

Within 48–72 Hours: Official Documentation

File an Identity Theft Report with Your National Authority

Official reports provide legal standing for disputes. Many creditors and agencies require these reports to process identity theft claims.

File Local Police Report

Get an official police report number. Many organizations require this for processing identity theft claims, even if police can't actively investigate.

What to Bring to Police:

• Government-issued photo ID
• Proof of address (utility bill, lease, etc.)
• Documentation of fraudulent activity (statements, letters, etc.)
• List of compromised accounts

Get Copies of Your Credit Reports; Note Fraudulent Items

Obtain free credit reports from all three bureaus. Identity theft victims are entitled to free reports regardless of timing.

How to Get Free Credit Reports:

• AnnualCreditReport.com (official US site) - all three bureaus
• Call 1-877-322-8228 (US) for phone requests
• Request by mail if needed for documentation
• Credit Karma or similar for ongoing monitoring

Dispute Charges/Accounts in Writing; Keep Certified-Mail Receipts

Written disputes create paper trails. While phone calls start the process, written disputes provide legal protection and documentation.

Ongoing Recovery (Weeks to Months)

Replace IDs (Driver's License, Health Card, Passport if Needed)

Replace compromised identification documents. If thieves have access to your IDs, they can continue impersonating you.

ID Replacement Checklist:

• Driver's license: Visit DMV with identity theft report
• Passport: Report stolen/compromised to State Department
• Social Security card: Contact Social Security Administration
• Health insurance cards: Contact insurance providers

Monitor Your Credit Monthly; Consider Credit Monitoring Services

Vigilant monitoring prevents re-victimization. Identity thieves often return to previously compromised identities.

Tighten Privacy (Mail Forwarding, Shredder, Opt-outs from Data Brokers)

Reduce your exposure to prevent future incidents. The more personal information available publicly, the easier it is for thieves to target you.

Privacy Protection Steps:

• Secure mail delivery: PO Box or locking mailbox
• Shred sensitive documents before disposal
• Opt out of pre-approved credit offers (optoutprescreen.com)
• Remove information from data brokers (Spokeo, WhitePages, etc.)
• Limit social media sharing of personal information

Documentation to Keep

Maintain detailed records throughout the recovery process. Good documentation speeds recovery and provides legal protection.

Create a Recovery Timeline:

• Date identity theft discovered
• Actions taken each day
• Expected resolution dates from creditors
• Follow-up reminders for delayed responses

Special Considerations

Tax Identity Theft

If thieves file tax returns in your name, act immediately. Contact the IRS or CRA as soon as you discover tax-related identity theft.

Tax ID Theft Actions:

• File Form 14039 (US) or contact CRA (Canada)
• Continue filing your legitimate return (paper filing required)
• Request IP PIN for future year protection
• Expect delays in tax refund processing

Medical Identity Theft

Check medical records and insurance claims carefully. Medical identity theft can affect your insurance coverage and medical treatment.

Medical ID Theft Actions:

• Contact insurance providers to review claims
• Request copies of medical records
• Dispute fraudulent medical bills
• Inform healthcare providers of the theft